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(54) Measuring network operational parameters as experienced by network operational traffic 



(57) A network operational parameter as experi- 
enced by network operational traffic Is measured by se- 
lecting a packet traversing a first monitoring point in a 
network in accordance with capability In a data structure 
definition of the packet for having additional information 
incorporated In the packet. Predetemiined information 
for measuring at least one network operational param- 
eter is incorporated in the selected packet in accordance 
with its data structure definition, and the packet is for- 



warded towards its destination in accordance with ad- 
dressing infomnation in the packet. The packet is again 
selected while traversing a second monitoring point in 
the network in accordance with presence of the prede- 
termined information, which is observed and used to im- 
plement a measurement of the network operational pa- 
rameter in accordance with the observed information. 
The invention may be implemented by using extension 
headers in networks confomiing to iPv6. 
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Description 

Technical Field 

[0001 ] This invention relates to methods and systems 5 
for measuring network operational parameters, for ex- 
ample one-way, end-to-end delays, as experienced by 
network operational traffic (such as data packets in a 
network using Transmission Control Protocol over Inter- 
net Protocol version 6 (TCP/I Pv6)). io 

Background Art 



[0002] As the Intemet grows and becomes more per- 
vasive in commercial and personal activities, the need is 
to monitor and optimise its operation likewise increases. 
One example is the measurement of one-way, end-to- 
end delay. Large values of this delay can affect the per- 
fomnance of some applications: excessive delay varia- 
tion Gitter) can dismpt real-time applications; transport- 20 
layer protocols are less able to sustain high bandwidth 
if end-to-end delay Is too large; the minimum end-to-end 
delay provides an estimate of the propagation and trans- 
mission delay or the likely delay under lightly-loaded 
path conditions; and values above the tiinimum provide 25 
a good indication of the level of cong- .stion present in 
the path followed by packets. Round-trip delay is easier 
to ascertain, but it does not necessarily provide a good 
means of estimating the one-way delay because up- 
stream and downstream data paths may be significantly 30 
different and may exhibit very different performance 
characteristics even when they are symmetric. 
[0003] The Internet technology in most widespread 
use al the beginning ol the 21 «• century is version 4 of 
the Internet Protocol (IPv4), and most of the measure- 35 
ment and monitoring techniques used with that Internet 
technology fall into one of two main categories: passive 
and active techniques 

[0004] Passive measurement technologies obsen^e 
real traffic (data packets) on a link without disruption to 40 
the service carried by those packets. Typically these 
technologies involve the use of state machines which 
perfomi some initial level of filtering to select the traffic 
of Interest and then search for particular events using 
pattern-matching techniques. Upon detection of these « 
events various counters can be updated appropriately. 
Examples include performance measurement Manage- 
ment Information Bases (MIBs) implemented by Net- 
wori< Element Providers (NEPs) and Remote (Monitoring 
(RMON) probes. Other passive monitoring probe solu- so 
tions take this one step further by extracting payload da- 
ta from packets that match the specified patt8m(s). Full 
packet capture is also possible. The collected data are 
made available to users either on demand (pull model) 
or upon the occun^ence of predefined trigger events S5 
(push model). 

[0005] As with the active measurements described 
below, a concern is that users may generate immense 
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amounts of measurement data that need to be shipped 
across the IP links to which the measurements relate, 
and this may degrade the performance of the service 
under test owing to competing resource requirements. 
There are also significant differences in what can be in- 
ferred from the measurements obtained by different 
passive monitoring approaches. RMON- and MIB- 
based solutions tend to consist primarily of counters that 
provide a global view of all traffic activity on a network. 
It Is difficult to relate the information obtained to individ- 
ual services or to infer knowledge that can be utilised to 
monitor adherence to contractual agreements. Industry 
or official standards often govern the implementation of 
the various counters and hence a new type of measure- 
ment may take an appreciable time to be ratified and 
adopted. Techniques which rely on events generated 
from a particular traffic stream would be better suited to 
address quality of service (OoS) perfomiance-related 
issues. 

[0006] Passive monitoring techniques are particularly 
useful in gathering 1 -point measurements of real user 
traffic at an observation point on the networi<. However, 
passive techniques are less suitable for making 2-point 
measurements of real user traffic, such as one-way de- 
lay, owing to the complexity Involved in correlating the 
packets detected at two distinct observation points. Ex- 
isting solutions typically involve the observation of iden- 
tifiable data patterns In packets at appropriately-posi- 
tioned monitorpolnts. A timestamp and a suitable digest 
of the data pattern are generated and stored. The one- 
way, end-to-end delay along a particular path can later 
be calculated as the time between observations of iden- 
tical data patterns at monitor points from either end of 
the path. However, there are a number of disadvantages 
to this approach. Unlike the case of round-trip delay 
measurement, it is necessary at least to transfer meas- 
urement data from one monitor point to the other for cor- 
relation, or even less desirably to transfer measurement 
data from both monitor points to a third location for cor- 
relation. These additional measurement data may re- 
quire shipping along the same nehwork links as those 
being monitored, possibly affecting the results obtained. 
There may also be a sizeable delay between making the 
measurements and calculating the end-to-end delay 
values because of scheduling delays at the monitoring 
points, subsequent propagation and transmission de- 
lays associated with transferring measurement data to 
the point of con-elation, and the time taken for the cor- 
relation itself. The location and functionality of the cor- 
relatkin process are additional factors which may influ- 
ence this aspect of measurement performance. 
[0007] Apart from synchronized clocks for making de- 
lay measurements, techniques are required to ensure 
that both obsen/ation points trigger on the same packet 
for the collection of measurement data. En-or handling 
for lost or mismatched samples is also necessary. Fur- 
thermore, passive measurement probes may not be 
able to keep pace as traffic volumes and data rates in- 
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crease. 

[0008] Active techniques are based on the injection 
into the network of synthetic traffic created specifically 
tor measurement purposes. This synthetic traffic has 
known characteiistics designed to test particular at- s 
tributes of a service. This type of measurement technol- 
ogy Is often employed to make 2-point measurements, 
particularly in relation to response time, packet loss, 
bandwidth and service availability. Active techniques 
are equally suitable for in-service or out-of-service test- »o 
ing. A number of global projects use such techniques 
and in partteularsome measurements based on the use 
of synthetic traffic are being standardized under the IP 
Perfonnance Metrics Working Group of the Intemet En- 
gineering Task Force (IETF). '5 
[0009] For one-way delay, injected packets must ei- 
ther be time-stamped before departure or else a record 
of the time and packet identity obtained and stored. The 
injected packets (either all of them or a sample) are iden- 
tified at the far end and removed from the stream. An- zo 
other time-stamp is obtained and used with the des- 
patch time-stamp to derive the required delay measure- 
ment. 

[0010] The major disadvantage of active measure- 
ment techniques is that they measure the packet for- 25 
warding and routing behaviour experienced by the syn- 
thetic traffic but not (necessarily) by the real user traffic. 
The resulting measurements are then used to make as- 
sumptions about and predict the experience of real user 
traffic. To ensure good results it is therefore very impor- 30 
tant to ensure that the synthetic traffic Is appropriately 
formed and has similar transmission characteristics to 
the real user data, so that It receives the same treatment 
and/or follows the same delivery path. Nonetheless, re- 
liance is placed on the accuracy of the active measure- 35 
ments to perfomfi value-added judgments about the 
service under test. 

[0011] An expanded version of Intemet technology, 
version 6 (IPv6), has been defined and is now being im- 
plemented in operational systems. IPv6 provides a va- 
riety of enhancements as compared to IPv4: 

128-bit IP addresses; 

scalable and hierarchical addressing designed for 
"aggregation"; ''^ 
better fomied packets, with provision for inclusion 
of 'extension' headers, that simplify processing, 
eliminate redundancies and provide enhanced 
functionality; 

Quality of Service / Class of Service support; so 

- Inherent security in the protocol; 

- "Plug & Play" auto-configuration of hosts; 

- mobility support. 

These enhancements are designed to improve or ex- 55 
tend the basic functionality of the Internet in communi- 
cating data in an efficient, reliable and robust manner. 
However, the inventors hereof have identified additional 



opportunities for using one or more of these enhance- 
ments to facilitate improved monitoring and measure- 
ment of the operation of Internet equipment using IPv6. 

Disclosure of Invention 

[001 2] According to one aspect of this invention there 
is provided a method of measuring a network operation- 
al parameter as experienced by network operational 
traffic, comprising the steps of: 

selecting a packet traversing a first monitoring point 
In a network in accordance with capability In a data 
structure definition of the packet for having addition- 
al information incorporated in the packet; 
incorporating predetermined infomiation for meas- 
uring at least one network operational parameter in 
said selected packet in accordance with its data 
structure definition; 

fonwarding said packet towards its destination in ac- 
cordance with addressing infomiation in the packet; 
selecting said packet traversing a second monitor- 
ing point in the network in accordance with pres- 
ence of said predetenmined infomiation, and ob- 
serving said predetermined information; and 
implementing a measurement of said network op- 
erational parameter in accordance with the ob- 
served information. 

[0013] The invention recognises arid develops an op- 
portunity provided by IPv6 packet extension headers to 
perform 'inline measurements'. The temi 'inline' as used 
herein indicates that measurement triggers whteh In- 
voke measurement activity, and/or the measurement 
data themselves, are incorporated into real user pack- 
ets, so that the measurement operations can be per- 
formed in the course of the normal processing of the 
packets or by specialized software or specialized hard- 
ware modules located at appropriate points in the net- 
work. This provides a high level of probability that the 
packets used to perform measurements experience the 
same treatment and delay as the majority of user pack- 
ets. The required functionality can easily be implement- 
ed by use of IPv6 extension headers, allowing more ac- 
curate, flexible and less intrusive measurements to be 
earned out. Hence inline techniques can be exploited in 
the development of innovative, more accurate and flex- 
ible measurement, management, accounting and billing 
operational support systems. 

[0014] According to another aspect of this invention 
there is provided a system for measuring a network op- 
erational parameter as experienced by networi< opera- 
tional traffic, comprising: 

a selector for selecting a packet traversing a first 
monitoring point in a network in accordance with ca- 
pability in a data stmcture definition of the packet 
for having additional information incorporated in the 
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packet; 

a packet modifier for incorporating predetermined 
Information tor measuring at least one network op- 
erational parameter in said selected packet in ac- 
cordance with its data structure definition; 
a packet forwarder for forwarding said packet to- 
wards its destination in accordance with addressing 
information in the packet; 

a selector for selecting said packet traversing a see- 



ls equally applicable in the context of other network tech- 
notogies which provide functionality analogous to IPv6 
extension headers. Accordingly the term packet as used 
herein is to be understood as embracing data partitions 
which are referred to by different terminology in such 
other network technologies, such as cells or frames. 
[0017] Refering to Figure 1, a notional fragment of 
the Internet is shown comprising routers 1 0 to 22 inter- 
connected by links. Packets 24 an-iving at the router 1 0 



ond monitoring point in the network in accordance " for exannple are directed on towards 
with presence of said predetermined infomnation, ^--m- < i «- > «f »t,««=^u=io ...oth<> 

and observing said predetermined information; and 
a parameter measurerfor implementing a measure- 
ment of said network operational parameter in ac- 
cordance with the observed information. 



Brief Description ot Drawings 
[001 51 A method and system in accordance with this 

invention, for performing inline measurement of network 20 octets). Groupings of adjacent bits to form functional 



identified in headers fomiing part of the packets, via the 
routers 1 2, 14 and 1 6 in accordance with routing tables 
constructed by the routers from infomnation which they 
exchange among themselves. The format of a packet 
header as specified for IPv6 in Request for Comments 
(RFC) 2460 of the Internet Society is shown in Figure 2. 
[001 8] Referring to Figure 2, the packet header is con- 
ventionally shown as a sequence of rows, each rov 
resenting thirty-two successive binary digit values (four 



operational parameters such as one-way end-to-end 
delay, will now be described, by way of example, with 
reference to the accompanying drawings, in which: 

Figure 1 shows a notional fragment of the Internet; 2 
Figure 2 shows the generic format of an I Pv6 pack- 
et heeder; 

Figure 3 shows the generic format of an IPv6 des- 
tination options extension header; 

Figure 4 shows the generic format of a type-length- • 
value (TLV) tuple which forms part of a 
destination options extension header; 

Figure 5 shows the generic format of an IPv6 rout- 
ing extension header; 

Figure 6 illustrates how IPv6 extension headers • 
may be embedded within IPv6 packets; 

Figure 7 shows the fonnat of one example of a des- 
tination options extension header config- 
ured to facilitate a measurement in accord- 
ance with this invention; 

Figure 8 shows an example of an IPv6 packet; 

Figure 9 shows the example IPv6 packet of Figure 
8 modified in accordance with this inven- 
tion by inclusion of an extension header to 
facilitate measurement of one-way delay; 
Figure 10 Is a block diagram Indicating possible 
points for software implementation of the 
invention jn a network element; and 
Figure 1 1 oullinf ocedural steps involved in one 
impler :ation of the invention. 



Best Mode for Carrying Out the Invention. & Industrial 
Applicability 

[0016] For convenience the invention will be de- 
scribed with reference to a nehwork implementing IPv6, 
in which data are partitioned for transmission into pack- 
ets. However, it should be understood that the invention 



titles are indicated by rectangles. The IPv6 header con- 
tains eight such groups: 

- Version 4-bit Internet Protocol version number 
(=6). 

- Traffic Class 8-bit traffic class field. 

- Flow Label 20-bit flow label. 

- Payload Length 16-bit unsigned integer. 
Length of the IPv6 payload (i.e. the rest of the pack- 
et, including any extension headers, following the 
IPv6 header) in octets. 

Next Header 8-bit selector. Identifies the type 
of header immediately following the IPv6 header, 
using protocol numbers specified (currently) by the 
Internet Assigned Numbers Authority (lANA) at ht; 
tp://www.iana.org/assignments/protocol-numbers. 

- Hop Limit 8-bit unsigned integer. Decrement- 
ed by 1 by each node that forwards the packet. The 
packet is discarded if Hop Limit is decremented to 
zero. 

- Source Address 128-bit address of the origi- 
nator of the packet, fomnatted as specified in RFC 
2373. 

- Destination Address 1 28-bit address of the in- 
tended recipient of the packet (possibly not the ul- 
timate recipient if a Routing header is present). 

[0019] In tPv6 optional internet-layer infomnation may 
be encoded in separate headers that may be placed be- 
tween the IPv6 header shown in Figure 2 and the upper- 
layer (e.g. TCP) header in a packet. There are various 
such extension headers, each identified by a distinct 
Next Header value. Figure 3 shows the fomnat of one 
such extension header, the Destination Options header. 
This header is used to carry optional information that 
need be examined only by a packet's destination node 
(s). The Destination Options header is identified by a 
Next Header value of 60 in the immediately preceding 
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header, and contains the following fields: 

- Next Header 8-bit selector. Identifies the type 
of header immediately following the Destination Op- 
tions header, in the same manner as the Next Head- 
er field of the IPv6 header described above. 

Hdr Ext Len 8-bll unsigned Integer. Length of 
the Destination Options header in 8-octet (64-bit) 
units, not including the first 8 octets. 
Options Variable-length field, of length such 
that the complete Destination Options header is an 
integer multiple of 8 octets long. Contains one or 
more type-length-value (TLV) encoded options, as 
described below. 

[0020] The TLV-encoded options have the following 
fomiat, as illustrated in Figure 4: 

- Option Type 8-bit identifier of the type of option 
(see below). 

- Opt Data Len 8-bit unsigned integer. Length of 
the Option Data field of this option, in octets. 

- Option Data Variable-length field. Option- 
Type-specific data. 

The highest-order two bits of the option type identifier 
specify action that must be taken if the processing IPv6 
node does not recognize the Option Type; 

00 - skip over this option and continue processing 
the header; 

01 - discard the packet; 

10 - discard the packet and, reganjiess of whether 
or not the packet's Destination Address was a mul- 
ticast address, send an Internet Control Message 
Protocol (IGMP) Parameter Problem, Code 2, mes- 
sage to the packet's Source Address, pointing to the 
unrecognised Option Type; 

1 1 - discard the packet and, only if the packet's Des- 
tination Address was not a multicast address, send 
an ICMP Parameter Problem, Code 2, message to 
the packet's Source Address, pointing to the unrec- 
ognised Option Type. 

The third-highest-order bit of the Option Type specifies 
whether or not the Option Data of that option can change 
en-route to the packet's final destination, so that com- 
putation or verification of authentication values can be 
perfomied without being affected by such changes. The 
significance of this bit is as follows: 

0 - Option Data do not change en-route; 

1 - Option Data may change en-route. 

[0021] The fomriat of another kind of extension head- 
er, the Routing header, is shown in Figure 5. This header 
is used by an IPv6 source to list one or more intermedi- 
ate nodes to be "visited" on the way to a packets des- 



tination. The Routing header is identified by a Next 
Header value of 43 in the immediately preceding head- 
er; and has the following format: 

5 - Next Header 8-bit selector Identifies the type 
of header immediately following the Routing head- 
er, in the same manner as the Next Header field of 
the IPv6 header described above. 
Hdr Ext Len 8-bit unsigned Integer Length of 

10 the Routing header in 8-octet units, not including the 
first 8 octets. 

Routing Type 8-bit identifier of a particular 
Routing header variant. 

Segments Left 8-bit unsigned integer. Number 
15 of route segments remaining, i.e. number of explic- 
itly listed intemiediate nodes still to be visited before 
reaching the final destination. 
- Type-specific data Variable-length field, of for- 
mat determined by the Routing Type, and of length 
20 such that the complete Routing header is an integer 
multiple of 8 octets long. 

[0022] All extension headers must be fonnatted so 
that their overall length is an integer multiple of eight 

25 octets, and fields of width n octets (rj = 1 , 2, 4 or 8) within 
a header should be placed at an integer multiple of n 
octets from the start of the header To assist this two 
special TLV encoded options are defined: the Padi op- 
tion comprising a single zero-valued octet (with no 

30 length or value field), and the PadN option (for inserting 
/V octets in total where N>^ ) comprising N-2 zero-valued 
octets plus a type field containing the value 1 and a 
length field containing the value N-2. 
[0023] Wilh the exception of a special Hop-by-Hop 

35 options header (not discussed here but described in 
RFC 2460), each of the different I Pv6 extension headers 
is required by the RFC to be examined only at the node 
(orgroup of nodes In the case of multicast services) hav- 
ing the destination address contained in the main IPv6 

40 header. In other words, packet extension headers are 
not examined or processed by intermediate nodes that 
are simply implementing routing according to IPv6 along 
the packet fonvarding route. 

[0024] Each extension header points to the start of the 
« next by means of the Next Header field, foming a kind 
of one-way chain. Each headerin the chain is processed 
strictly in sequence, and the contents and semantics of 
each extension header determine whether the receiving 
node will proceed to the next header or not. Figure 6 
50 illustrates an example of such a chain of headers, for 
the case where a Destination Options header has been 
Inserted between the IPv6 header and the packet's pay- 
load. In this case the Next Header field of the I Pv6 head- 
er contains the value 60, and the corresponding field of 
55 the Destination Options header contains the value 6, in- 
dicating that this extension header is followed by a TCP 
upper-protocol-layer header and data. 
[0025] The present invention makes use of extension 
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headers, for example the Destination Options and Rout- 
ing headers, to facilitate 'inline' measurement of opera- 
tional parameters such as one-way end-to-end delay, 
two-way (round-trip) delay, accumulated delay (using 
time stamps added as a packet traverses various seg- 
ments of a link), and two-point loss (loss of packets m 
transit between two points). The invention may also be 
used for monitoring router operation, such as tracing 
progress of packets through the network by means of 
tags in extension headers to Identify packets to be 
traced. This measurement and monitoring is accom- 
plished by adding extension headers, formatted as de- 
scribed in the example below, to packets which are tra- 
versing the network as part of its nomial operation . 
[00261 The Destination Options header for example 
can conveniently be used for these purposes without 
disturbingthe normal operation of routers which process 
the packets to which this header has been added, by 
setting the highest-order two bits of the option type iden- 
tifier in the extension header to 00. If desired the Desti- 
nation Options header can be removed before delivery 
of the packetto Its intended destination of the packet (e. 
g client/server). But even if this is not done (either in- 
tentionally or because the header is erroneously not re- 
moved) the destination node will simply skip past this 
option upon receipt, in accordance with the GO option 
type identifier. 

[0027] 1 n principle a specific extension header could 
be defined for measurement purposes, as RFC 2460 
pemiits potential definition of additional extension head- 
er types In the future. The invention can be used with 
such specific extension headers it they are defined. 
However, this approach would result in the provision of 
a specific Next Header value uniquely associated with 
measurement extension headers and identifiable as 
such anywhere in the network. Accordingly network 
equipment manufacturers and operators would be able 
to determine that any packet having a header containing 
this Next Header value Is being used to gather meas- 
urement and management data. Equipment could read- 
ily be designed to treat such packets in a favoured but 
atypical manner, potentially defeating the pu rpose of the 
measurements. By using the Destination Options exten- 
sion header (or the Routing header) this risk Is mini- 
mised as there is nothing to distinguish the measure- 
ment purpose of the header. Furthermore, only those 
nodes to which Destination Options or Routing headers 
are applicable will process the headers in the course of 
normal network operation, reducing the risk of distur- 
bance to that operation. 

[0028] However, it is of course necessary for nodes 
which are involved in the measurement process (e.g. 
the routers 1 0 and 16 in the example described below) 
to detect and process the relevant extension headers, 
even though they would ignore them in normal network 
operation. This may be accomplished, as described be- 
low, by augmenting the normal operating firmware in 
these nodes with modules which extend the packet 



processing functionality of the nodes as required 
[0029] For the measurement of delay a Destination 
Options extension header is conveniently used to cariy 
information required for the measurement. Figure 7 
5 shows the tomiat of such a header for use in measunng 
one-way delay, including appropriate option data fields 
as follows: 

- Pointer 8-bit unsigned integer. Used to indi- 
te cate the location of the next unused slot in the option 

data i.e. for storage of a timestamp, 

- Overflow 8-bit unsigned integer. Used to indi- 
cate if an attempt is made to store moretimestamps 
than there are slots to accommodate them. 

(5 - Flags Octet comprising eight binary flags, for 
example for indcating the nature of data stored 
elsewhere in the option data fields. 

- Reserved A zero-valued octet included for 
alignmentpurposes, i.e. toensurethatthecomplete 

20 extension header is an integer multiple of eight oc- 
tets in size. 

- Source timestamp Two 32-bit unsigned inte- 
gers. Timestamp indicating time of fonwarding of the 
packet from the interface of the node where the ex- 

25 tension header was inserted. The two component 
integers represent the seconds and microseconds 
portions respectively of the time elapsed since 0000 
hrs on 1*' January 1970 Universal Coordinated 
Time (UTC). . 
30 . Destination timestamp Two 32-bit unsigned 
Integers. Timestamp indicating time of receipt of the 
packet at the interface of the node where the exten- 
sion header is detected. In the same format as the 
source timestamp. 

35 

The Option Type identifier in the header is set to a value 
allocated to idenlily "one-way end-to-end delay meas- 
urement". . 
[0030] The example of the invention shown in Figure 
40 1 illustrates thecase of delay measurement within a sec- 
tion of a network, such as between ingress and egress 
points of a packet flow across the boundaries of a sec- 
tion under the controlof a single operator. However, the 
invention is equally applicable to "end-to-end" measure- 
rs ments, such as from a server (e.g. sen/ing a website) to 
a client (e.g. a wireless-connected personal digital as- 
sistant (PDA) running a web browser application). 
[0031] Referring again to Figure 1 , the router 10 is 
configured to select one or more packets in accordance 
50 with an appropriate, predetemiined criterion. For exam- 
ple packets could be selected at random from among 
those addressed to a specified destination, or emanat- 
ing from a particular source in-espective of destination. 
Other possibilities for selection include: all packets 
55 transported by a particular upper-layer protocol such as 
TCP User Datagram Protocol (UDP), ICMP or Internet 
Group Management Protocol (IGMP), or all packets of 
a particular application type such as Session Initiation 
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Protocol (SIP), Real-Time Transport Protocol (RTP) or 
Hypertext Transfer Protocol (HTTP). Thus identification 
of packets (e.g. at network ingress points) in a desired 
flow or stream of packets conforming to tfie same char- 
acteristics, for the insertion of an extension header (with 
its option fields), can be controlled by arbitrarily complex 
rules involving for example a combination of any of: 
source and destination IP addresses and prefixes; 
transport protocols; source and destination port num- 
bers included in transport protocols like TCP and UDP; 
traffic class; and flow label. If the networt< is carrying 
both IPv4 and iPvB packets, then the selection is made 
from among the IPv6 packets. 

[0032] If repeated measurements need to be made, 
and a unifomi interval were to be used between packets 
selected for inline measurements, the measured delay 
could be affected by the operation of other applications 
using the same path that happen to be communicating 
on the same periodic basis. To mitigate this possibility 
the interval between selected packets is preferably cho- 
sen from a random distribution, such as a Poisson or 
truncated Pareto distribution. 
[0033] Once an appropriate packet has been select- 
ed, a Destination Options extension header is added (or 
modified if the packet contains one already) and a TLV 
option formatted as shown in Figure 7 is added, with the 
type field indicative of "one-way end-to-end delay" and 
a timestamp value. The delay to be measured is the total 
time during which the packet is traversing the link(s) be- 
tween departing from the sending node's link interface 
and arriving at the destination node's link interface 
(known as 'V/ire time"), so the known or estimated final 
processing time in the node between obtaining the 
timestamp value and departure of the packet from the 
interface should be added to the timestamp before it is 
inserted into the packet's header. If desired another TLV 
encoded option can be included to provide an address 
(e.g. for a network management node) to which the de- 
lay measurement result should be forwarded after cal- 
culation at the receiving node. 

[0034] Figure B shows an example of an IPv6 packet 
before insertion of a Destination Options extension 
header for delay measurement, and Figure 9 shows the 
same packet after addition of the header (highlighted by 
dash-dot lines) containing the TLV options for the times- 
tamps and the fonwarding address. Comparing the two 
figures, the IPv6 payload length field in Figure 9 has 
been increased by 48, indicating the number of octets 
in the extension header. The next header field in the 
IPv6 header has been changed to 60 (indicating a Des- 
tination Options extension header follows), and the hop 
limit has been decremented. The next header field of 
the extension header contains the value 6 (for the fol- 
lowing TCP header), previously in the IPv6 header, and 
the extension header's length is indicated as five 8-octet 
units beyond the first eight octets. The first TLV option 
has an option type value of 33 (0010 0001), used in this 
example to indicate "one-way end-to-end delay" and al- 



so indicative that the option may be skipped by any node 
which is not equipped to process it and that the option 
data may change (i.e. the destination timestamp). The 
option length is 20 octets. The pointer value is 1 3 (0000 

5 1101), indfcating that the 1 3"^ octet (the start of the des- 
tination timestamp) is the next unused slot in the option, 
and the overflow and flags octets are set to zero. The 
source timestamp comprises values of 3D10 FCOOh 
seconds (corresponding to a date in June 20O2) and 

10 000B86A0h microseconds (corresponding to a time just 
after 1 800). The next TLV option comprises a total of six 
octets of padding, followed by the last option, specifying 
a forwarding address. This option has a type of 34 (001 0 
0010, used in this example to indicate "fonwarding ad- 

(5 dress for delay measurement" and also indfcative that 
the option may be skipped by any node whch is not 
equipped to process it and thai the option data may not 
change. The option length is 16 octets, comprising the 
128-bit forwarding address itself. 

20 [0035] The node at the other end of the path over 
which delay is to be measured (in the example in Figure 
1 this is the node 1 6) is configured as described below 
to process Destination Options headers and in particular 
is able to inteipret the special 'one-way end-to-end de- 

25 lay" and "forwarding address for delay measurement" 
TLV options. On receipt of a packet with one of these 
headers, the node 1 6 reads and stores the contents of 
the header The packet is then reassembled, possibly 
without the Destinations Options header if no other op- 

30 tion fields are present, and fonvarded on to its ultimate 
destination. 

[0036] The source timestamp value contained in the 
Destination Options header is read and subtracted from 
the current time on the destination node in order to cal- 

35 culate the one-way end-to-end link-transmission time 
delay. The initial packet processing time between arrival 
of the packet at the node's interface and obtaining the 
node's own value of current time should also be ac- 
counted for in the calculation. The cateulated value is 

40 fonvarded to the address specified in the Destination 
Options header either via a TLV-encoded option in a 
Destination Options header included in a new packet 
generated for that purpose, or by being added to a user 
packet headed for the same address^ depending on the 

45 urgency of the measurement. Alternatively, another TLV 
option could be used to specify that the delay measure- 
ment results be stored in a cache in the node 1 6 for later 
despatch or collection. 

[0037] It is necessary to ensure that the clocks in the 
so source and destination nodes are either synchronized 
to a desired degree of accuracy or that the time offset 
between them is stable and known. The required accu- 
racy and precision of the delay measurement, and 
therefore of the time-stamping process, is a significant 
55 factor in the choice of method of clock synchronization. 
These and related issues are discussed in more detail 
in RFC 2679. 

[0038] The IPv6 specification requires that eveiy link 
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must have a maximum transmission unit (MTU) size of 
1280 octets or greaterto allow IPv6 to operate. The rec- 
ommended MTU is 1600 octets. If the addition of Des- 
tination Options to a selected packet risks violating the 
MTU restrictions of the link over which the packet will 
be forwarded by the node 10, the next suitable packet 
should be selected instead. This is because the delay 
measurement is time-sensitive and it would therefore be 
inappropriate to incur the time penalty associated with 
the lower-layer packet fragmentation and reassembly 
required to fonward the packet over that link. As the 
packet selection process is desirably randomised, this 
modification to the process should nothave any adverse 
statistical effect. 

[0039] As described above, the processes of adding 
Destination Options headers to packets and detecting 
and removing them elsewhere to perfottn delay meas- 
urements are undertaken by routers such as 1 0 and 16. 
Such routers are efieclively dedicated data processors, 
containing one or more processor units operating under 
software program control, associated memory for stor- 
ing the programs and related data, buffer memory for 
holding packets being processed and input and output 
interfaces for receiving and transmitting the packets. 
[0040] At this system level the required functionality 
for performing delay and other measurements can be 
implemented, for example, by using dynamically loada- 
ble modules to provide additional processing logic for 
the manipulation of packet extensions in headers and 
other supporting functions such as the storage, retrieval, • 
correlation and toiwarding of measurement-related da- 
ta. By modularising the set of monitonng and measure- 
ment tasks it is possible to dynamically load only those 
modules thai are needed at a particular time and then 
unload them once they are no longer in use. The load- 
able modules may be remotely delivered to the nodes, 
loaded and configured and, whilst in use, effectively be- 
come an integral, embedded part of the nodes' operat- 
ing software. 

[0041] Minimization of the actively-used processing 
logic in this way can reduce memory usage, speed up 
processing time, limit circuit-board space requirements, 
simplify designs and reduce overall subsystem com- 
plexity. In the case of nodes that comprise mobile de- 
vices in a wireless local area network (lAU) such as cell 
phones and handheld personal digital assistants 
(PDAs), which have limited resources in temis of 
processing capability and memory, this modular ap- 
proach is particularly advantageous. The required func- 
tionality can be easily provided at network base station 
nodes to automatically load/unload modules in re- 
sponse to signalling or even the data traffic itself, facili- 
tating automated, reactive strategies for deployment of 
efficient measuring and monitoring. In particular this ob- 
viates the need to track traffic around a network for 
measurement purposes because the traff c itself can in- 
itiate the measurement/monitoring functionality. This 
could be especially useful in the context of mobile cel- 



lular radio access networks, as mobile terminals can 
roam freely and data may take a plurality of paths 
through the network during a single session. 
[0042] This modular approach also lends itself well to 
5 a remote, distributed implementation as the modules 
can be freely inserted and removed around the network 
as required, providing a potential for dynamically-con- 
figurable, localized processing sites and correlation en- 
tities. Another significant advantage of the embedded 
10 module approach is that it is not necessary physically to 
connect into the electrical or optical cables comprising 
the links between routers in order to monitor passing da- 
ta. The embedded module approach instead makes use 
of spare programmable logic or processing capability 
f5 within the routers or other network devices, providing a 
more integrated, inherently powerful solution. Upgrades 
Involve delivering new modules to nodes (for example 
over the network itself), which can either be directly 
loaded on delivery or be temporarily stored on some 
20 fomi of local media (e.g. hard disc storage) for later use. 
[0043] Figure 1 0 shows an illustrative architecture of 
a single network element 30 with a number of line inter- 
faces 32 and a controller 34 comprising a processor, 
memory and program software or firmware. The figure 
25 illustrates three different example integration points 
where, depending on the design of the network element 
30, dynamfcally loadable modules can be accommodat- 



ed: 

0 - (A) the modules may be loaded onto a line interface 
32 to control dynamic reconfiguration of hardware 
(e.g. field programmable gate arrays - FPGAs), or 
as software/ fimiware to control processing logic in 
the line interface, or as a hybrid combination of both 

}5 options; 

- (B) the modules may exist as loadable software in 
the software operating system 'kernel' or equivalent 
for the controller 34; 

- (C) the modules may exist as loadable applications 
40 in 'user- space provided by the controller's operating 

system. 

[0044] Integration in accordance with option B as- 
sumes that the operating system enables addition of 

45 modules to the system kernel, e.g. Loadable Kemel 
Modules (LKMs). These typically provide better 
processing performance compared to applications exe- 
cuting in user space, and can easily be configured to 
add. remove and modify extension headers as an inte- 

50 gral part of the kernel's implementation of the networi< 
protocol stack rather than having to explicitly construct 
entire packets in an external userspace process. 
[0045] Option C involves processing IPv6 extension 
headers in user space rather than as part of the operat- 

55 ing system's protocol stack implementation. This may 
not be as elegant a solution as the use of kemel mod- 
ules, and may have poorer performance. However it 
does not require knowledge of operating system kemel 
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programming techniques and therefore may be simpler 
to Implement. In addition it avoids possible problems 
with operating system security and integrity which may 
conflict with security policies of an organisation operat- 
ing the routers or other nodes In question. 
[0046] The insertion of extension headers Into user 
traffic for the purpose of measurement and monitoring 
can be dynamically controlled depending on a particular 
management application requirement. Thus not all user 
packets need to have extension headers embedded in 
them. Selection can be based on application and sam- 
pling could also be applied. 

[0047] The techniques described above for perfomi- 
Ing Inline monitoring and measurement provide a 
number of advantages over existing approaches: 

The router functionality that Implements the IPv6 
protocol is also used to perform the work in detect- 
ing which packets need to be processed, since 
these are identified via a standard extension head- 
er; it is therefore possible to avoid complex filtering 
techniques to examine every packet arriving at an 
Interface In order to check whether the packet 
meets predefined criteria for Inclusion In the moni- 
toring/measurement operation. 
It is the user traffic itself which carries the measure- 
ment and triggering infomiation, so when a packet 
is observed at each of two monitoring points it is 
guaranteed that the same packet Is Involved on 
both occasions. 

Similarly, correlation of data from path endpolnts Is 
not necessary, reducing the complexity of the meas- 
urement system, potentially reducing the amount of 
measurement data that must be transferred across 
the network, and facilitating speedier availability of 
the measurement results. 

Any added data is incorporated within real user traf- 
fic. Assuming that the marginal increase in the 
packet header length does not change how the 
packet is treated on Its journey through the network, 
there is a very high probability that the added data 
will therefore receive the same treatment and follow 
the same routing path as the real user traffic. 
The total amount of additional traffic transported 
across the network for measurement purposes is 
limited. 

Unlike active measurements consisting of injected 
packets, two-point inline measurement results will 
more accurately reflect the behaviour of packets in- 
fluencing a user's experience of the network's op- 
eration, with only a small additional systematic 
processing delay and marginally larger overall 
packet length compared to undisturbed packets. 
The characteristics of the IPv6 protocol are used in 
an advantageous manner to enable dynamic instru- 
mentation for measurement and monitoring of the 
network's behaviour to be simplified, and so reduce 
the cost and complexity and the requirement for 



specialized probes to provide the same functional- 
ity. 

Inline measurements using IPv6 extension headers 
are not In general affected by the higher-layer trans- 
3 port protocol used (e.g. UDP or TCP). Similar meas- 
urements can therefore be conducted for any cho- 
sen transport protocol or, conversely, despite the 
given transport protocol. 

10 [0048] The 20-bit flow label field in the main IPv6 
header (Figure 2) is experimental In nature. To the ex- 
tent that this field Is not actually used for its original In- 
tended purpose, and assuming that Its use for other pur- 
poses does not compromise operation of the network, 

IS acombination of destination options, routing header and 
the flow label field enable selective addition of data to 
real user traffic which will be detected and processed, 
where the necessary functionality is implemented, by a 
node's IPv6 protocol layer. The level and nature of 

20 processing can be detennlned by the options contained 
in the extension header, and may involve incrementing 
counters, adding a timestamp annotation, extracting 
packet data and dumping It into a cache with timestamp 
annotations and various counts, or triggering capture of 

25 a full copy of a packet. Destination options on iheir own 
can be used to perform end-to-end inline service meas- 
urements (across an IPv6 network). With the addition of 
a routing header, it is possible to target specilic nodes 
en-route to enable the implementation of more detailed 

30 service measurements as the user traffic traverses cru- 
cial points of a network cloud. It Is also possible to em- 
ploy some bits In the flow-label field to easily identify and 
trigger measurement and monitoring behaviour as the 
user traffic containing the inline data is forwarded via 

35 nodes en-route to its destination. 

[0049] In general tenns, the invention involves the fol- 
lowing procedural steps, as illustrated in Figure 11, 
which may be distributed among several different Items 
of equipment (e.g. routers): 

40 

(a) a packet is selected at a first "bglcal" point in 
the network (40); 

(b) data are added to the packet by means of at least 
one extension header (42); 

'<5 (c) data in any existing extension header may op- 
tionally be modified; 

(d) the extension header data in the packet are ob- 
served, for example at a second "logical" point in 
the network (44, 46); 
50 (e) the extension header data may then be removed 
(48) and the required measurement is obtained 
(50). 

The "logical" points In the network may also be physi- 
55 cally-separated points. However, depending on the na- 
ture of the measuring or monitoring activity, the two "log- 
ical" points may be physically co-located at the same 
physical point. For example a single observation point 
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may be used for tracing or tracking a TCP connection 
or any transactional "conversation" (such as signalling 
protocols for the establishment and maintenance of 
slate) that traverses this observation point. Thus the ob- 
servation point could insert extension headers into 
packets flowing in one direction, and receive echoed 
values in extension headers In packets In the reverse 
direction, for response-based measurements. In this 
way connection set-up time for TCP orother connection- 
oriented or transactional protocols can be estimated. 
Another possibility would be to measure the time taken 
to set up an SIP association so that a real-time service 
like voice-over-IP (VoIP) can be delivered. Another ex- 
ample of co-location of logical measurement points Is 
the measurement of parameters on a ring network. 
[0050] Although the invention has been described for 
convenience In the context of a network conforming to 
the IPv6, it is equally applcable in connection with other 
networking systems and protocols which enable addi- 
tional Information to be Incorporated in a packet during 
its transit through a network. 



Claims 

1. A method of measuring a network operational pa- 
rameter as experienced by network operational traf- 
fic, comprising the steps of: 

selecting a packet traversing a first monitoring 
point in a networtc in accordance with capability 
in a data structure definition of the packet for 
having additional Infonnation incorporated In 
the packet; 

Incorporating predetermined information for 
measuring at least one network operational pa- 
rameter in said selected packet in accordance 
with Its data structure definition; 
fonvarding said packet towards Its destination 
In accordance with addressing information in 
the packet; 

selecting said packet traversing a second mon- 
itoring point In the network In accordance with 
presence of said predetermined infonnation, 
and observing said predetermined information; 
and 

implementing a measurement of said network 
operational parameter in accordance with the 
observed information. 

2. The method of claim 1 , wherein the first and second 
monitoring points are situated at the same physical 
location in the network. 

3. The method of claim 1 or claim 2, wherein at least 
one of the first and second monitoring points is sit- 
uated at a source or destination end-point of the se- 
lected packet. 
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4. The method of claim 3, wherein the packet path to 
the end-point Involves a wireless connection. ' 

5. The method of any one of the preceding claims, 
wherein the network operational parameter is any 
of one-way end-to-end delay, round-trip delay, ac- 
cumulated delay, two-point loss and progress of 
packets through the networi<. 

10 6. The method of claim 5, wherein the predetermined 
information comprises a timestamp of transmission 
of said packet from said first monitoring point. 

7. The method of any one of the preceding claims, 
IS wherein the network uses Internet Protocol version 

6 (IPv6) and the predetermined Infonnation is Incor- 
porated In an IPv6 extension header. 

8. The method of claim 7. wherein the IPv6 extension 
20 header is a Destination Options extension header. 

9. A system for measuring a networi< operational pa- 
rameter as experienced by network operational traf- 
fic, comprising: 

a selector for selecting a packet traversing a 
firstmonitoring point in a network in accordance 
with capability in a data structure definition of 
the packet for having additional infonnation In- 

30 corporated in the packet; 

a packet modifier for incorporating predeter- 
mined infonnation for measuring at least one 
network operational parameter In said selected 
packetin accordance with its data structure def- 

35 inltlon; 

a packet forwarder for forwarding said packet 
towards its destination In accordance with ad- 
dressing Infonnation In the packet; 
a selector for selecting said packet traversing 

40 a second monitoring point In the network In ac- 

cordance with presence of said predetermined 
infonnation, and observing said predetermined 
information; and 

a parameter measurer for implementing a 
45 measurement of said networi< operational pa- 

rameter In accordance with the observed Infor- 
mation. 

10. The system of claim 9, wherein the network opera- 
50 tional parameter Is any of one-way end-to-end de- 
lay, round-trip delay, accumulated delay, two-point 
loss and progress of packets through the network. 
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Fig.2 (prior art) 

0 4 12 31 

Version| Traffic class | Flow label 

Payload length | Next header | Hop limit 



Source address 



Destination address 



Fig. 3 (prior art) 
Next header | Header ext len | 
Options 



Fig.4 (prior art) 
Option type | Option data lenj Option data 



Fig, 5 (prior art) 
Next header | Header ext len | Routing type | Segments left 



Type-specific data ! 

■ 



12 



EP 1 401 147 A1 



Fig. 6 (prior art) 
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Fig.9 
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Fig. 11 
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